Security
attack surface
all points an attacker can interact with
Source board
This definition comes from the board below. Open it to see the term in context.
The Security MindsetSecurityMore terms from this board
- assume breachdesign for a compromised layer
- authenticityprovably who they claim
- CIA triadconfidentiality (secret) / integrity (untampered) / availability (up)
- complete mediationcheck every access
- defense in depthlayered controls
- fail securedeny on error
- least privilegeminimum access needed
- no security through obscurity (Kerckhoffs)assume the design is known
- non-repudiationcan't deny you did it
- security mindsetthink like an attacker
- threat modelthe structured 'what can go wrong' at each trust boundary
- trust boundaryline between trust levels (validate crossings)